why not use localhost which most browsers have no issues validating? .dev being on HSTS is a positive imo